Skip to content


The regulations implementing the CCPA require that if a business sells personal information and collects personal information from consumers online it must honor “user-enabled global privacy controls” that communicate a desire of the consumer to opt-out of the sale of personal information.[1]  There is no single format or technical specification for creating, transmitting, or receiving a do not sell signal, nor is there any empirical data concerning how many businesses (if any) are capable of monitoring for such signals.

[1] CCPA Regulations, § 999.315(c).